docs: add guest image command inventory - #685
Draft
Leechael wants to merge 2 commits into
Draft
Conversation
Leechael
marked this pull request as draft
May 18, 2026 13:58
Leechael
force-pushed
the
docs/guest-image-tool-inventory
branch
from
May 19, 2026 10:42
221c1d0 to
0102dcf
Compare
… v0.5.1/v0.5.3 pages Follow-ups from the Phala Cloud pre-launch v0.0.17 incident (Phala-Network/phala-cloud-monorepo#1936), where three fleet-wide guest userland traits were confirmed on real CVMs and in the pinned poky defconfig: - BusyBox 1.36.1 is built from the same kirkstone defconfig on every 0.5.x image, with sub-features trimmed: no 'head -c' (CONFIG_FEATURE_FANCY_HEAD), no 'dd ibs=/obs=/conv=' (CONFIG_FEATURE_DD_IBS_OBS), no chpasswd/cryptpw/mkpasswd applets, and busybox passwd has no --stdin. Add a BusyBox Option Caveats section with workarounds ('dd bs=1 count=N') and per-page pointers. - Non-interactive password setting only works by writing an 'openssl passwd -6' hash into /etc/shadow; openssl ships in every image via ca-certificates. Add a Password and Account Management section, including the locked-account warning: dev-image sshd is OpenSSH built without PAM, so 'passwd -l' denies ALL authentication including public keys. - Document the two dev-image traits behind the incident (PAM-less sshd, debug-tweaks empty root password). Also: - Add v0.5.1 and v0.5.3 pages (both still deployed) derived from build recipes diffed against the verified v0.5.4 inventory: no pigz (gzip/ gunzip/zcat are BusyBox applets), v0.5.1 keeps qemu-ga and lacks fuse3. - Extend every version page's not-present list with chage/chpasswd/ cryptpw/mkpasswd/usermod. - Note the v0.5.11+ build-tree relocation into os/yocto.
Leechael
force-pushed
the
docs/guest-image-tool-inventory
branch
from
August 6, 2026 15:57
0102dcf to
41470e4
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Notes
Testing